Set up a template's Access Contol List ( ACL ) entries so that the become default entries  in any databases created using that template.

If you put Access Contol List entries in a template with square brackets around them they will become proper entries in any databases created using that template.

eg:

[LocalDomainServers]

or

[LocalSupport]

Roles are carried over automatically.

NOTE: Groups in square brackets do not actually work in the template, so make sure you add new entries, do not change existing ones or you will risk locking yourself out of the database.

ie

[Developers]  and Developers  should both be in the ACL of a template.